Vulnerability in Hclsoftware Domino Server
CVE-2026-108014
Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Domino Server. An unauthenticated network attacker could spoof server certificates to execute a man in the middle (MITM) attack, enabling them to intercept and/or modify the content of outbound TLS connections.
Vulnerability class: POODLE (CVE-2014-3566)
Published · last modified .
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
- Hclsoftware Domino Server — versions <1=2.0.2 FP8, <=14.0 FP5, 14.5, ,<=14.5.1 FP1